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LI 


75 


("709'7$.ccls. or "380"/$.ccls. or 
"713'7$.ccls. or "7267$.ccls.) and 
(((unix or linux or "intel based" or 
window? or "os" or operating) with 
hool<?)) and (hijaclc$ or risk or 
securit/ or nnalware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attaclc$ or 
compromis$ or corrupt$ or 

rniint'prmppiQi ir<fc or ftvprfllnwt or 

"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (exception? or 
interrupt$ or instruction? or 
command or function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEI^; 
IBMJDB 


OR 


OFF 


2007/08/01 11:35 


L2 


76 


("7097$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((unix or linux or "intel based" or 
window? or "os" or operating) with 
hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
comma ndeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$ or 

"lihr" nr infn!<;inn nr "iri^"^ and 

(frame$ or buffer$ or stack$) and 
(("ret" or return or branch) with 
(exception? or interrupt$ or 
instruction? or command or function 
or trace)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IBM_TDB 


OR 


OFF 


2007/08/01 11:37 

V 


L3 


161 


(((unix or linux or "intel based" or 
window? or "os" or operating) with 
hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$ or 

"lihr" nr intriicion nr "iHq"^ PinrI 

(frame$ or buffer$ or stacl($) and 
(("ret" or return or branch) with 
(exception? or interrupt$ or 
instruction? or command or function 
or trace)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJDB 


OR 


OFF 


2007/08/01 11:41 
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L4 



70 



L5 



381 



L6 



101 



(((unix or linux or "Intel based" or 
window? or "os" or operating) with 
hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$ or 
"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return or branch) with 
(exception? or interrupt$ or 
Instruction? or command or function 
or trace)) 

(((unix or linux or "intel based" or 
window? or "os" or operating) with 
(hook? or stall or stalling))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or womi? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$ or "libc" or Intrusion or 
"ids") and (frame$ or bufFer$ or 
stack$) and (("ret" or return or 
branch) with (exception? or 
interrupt$ or Instruction? or 
command or function or trace)) 

("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((unix or linux or "intel based" or 
window? or "os" or operating) with 
(hook? or stall or stalling))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$ or "libc" or Intrusion or 
"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return or 
branch) with (exception? or 
interrupt$ or instruction? or 
command or function or trace)) 



US-PGPUB; 


OR 


OFF 


EPO; JPO 






US-PGPUB; 


OR 


OFF 


USPAT; 






EPO; JPO; 






DERWENT; 






IBM_TDB 






US-PGPUB; 


OR 


OFF 


USPAT; 






EPO; JPO; 






DERWENT; 






IBM TDB 













2007/08/01 11:40 



2007/08/01 11:43 



2007/08/01 11:44 
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L7 


197 


({(unix or linux or "intel based" or 
window? or "os" or operating) witli 
(hoolc? or stall or stalling))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or cx)mpromls$ or 
corrupt$ or countermeasur$ or 
ovemiow^ or mdc or inuusion or 
"ids") and (frame$ or bufFer$ or 
stack$) and (("ret" or return or 
branch) with (exception? or 
interrupt$ or instruction? or 
command or function or trace)) 


US-PGPUB; 
EPO; JPO 


OR 


OFF 


2007/08/01 11:45 


S5 


0 


("709"/$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or "726"/$.cclsO and 

WIIIUUWS> nUUIvb Ul Uj IIUUIxo ) 

and (malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$) with (buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
FPO' IPO" 

DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/06 11:11 


S7 


1 


("709"/$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or "7267$.ccls.) and 
(((unix or linux or window$ or "os") 

ClUJZ. ^IIUUIv: Ul bLdllCpyy dllU 

(malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overniow$) with (buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 

IBM_TDB 


OR 


OFF 


2007/02/27 16:30 


S8 


1 


("7097$.ccls. or "3807$.ccls. or 
"7137$.ccls. or "7267$.ccls.) and 
(((unix or linux or window$ or "os") 
adj2 (hook? or stall$)) and 

^mAliA/sro nr v/iriic or \/iriiQPC or 

^iliOIWCIIC Ul VII Ud Ul Vll UdCd Ul 

trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
Gorrupt$ or countermeasur$ or 
overfllow$) with (call or "api" or 
buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
TRM TDB 


OR 


OFF 


2007/02/27 16:33 


S9 


6 


(((unix or linux or window$ or "os") 
adj2 (hook? or stall$)) and 
(^maiware or virus or viruses or 
trojan? or worm? or Gommandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$) with (call or "api" or 
buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
con* lod* 

DERWENT; 
IBM_TDB 


OR 


OFF 


2007/02/27 16:32 
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SIO 


20 


("7097$.ccls. or "380'7$.ccls. or 
"7137$.ccls. or "726"/$.ccls.) and 
(((unix or linux or window$ or "os" 
or "operating system") adj2 (hook? 
or stall$ or intercept? or interdict$ 

or rAnfiir^t^^ ahH ^mnlwArp nr \/iriic 

or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(call or "api" or buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/02/27 16:50 


S15 


144 


("709'7$.ccls. or "3807$.ccls. or 
'7137$.ccls. or •7267$.ccls.) and 
(((unix or linux or window$ or "os" 
or "operating system" or solan's or 
"os9") same (event or exception or 
hook? or stall$ or intercept? or 
interdict$ or captur$)) and (malware 
or virus or viruses or trojan? or 
worm? or commandeer$ or attack$ 

nr rnmrirnmic^t nr r'nrriinf't nr 

Vjl UUI 1 l|JI Ul 1 IIO^ Ul ^Ul 1 U|JL4> Ul 

countermeasur$ or overfllow$) with 
(thread? or process or call or "api" 
or buffer$ or stack$ or 
application?)) and dispatch$ and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/01 14:25 


S16 


388 


(((unix or linux or window$ or "os" 
or "operating system" or Solaris or 
"os9") same (event or exception or 
hook? or stall$ or intercept? or 
interdict$ or captur$)) and (malware 
or virus or viruses or trojan? or 
worm? or commandeer$ or attack$ 

Ul L.UIII|JI Ulllld^ Ul CUIlUpL^ Ul 

countermeasur$ or overfllow$) with 
(thread? or process or call or "api" 
or buffer$ or stack$ or 
application?)) and dispatch$ and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/03/01 14:30 


S17 


141 


(((unix or linux or window$ or "os" 
or "operating system" or Solaris or 
"os9") same (event or exception or 
hook? or stall$ or intercept? or 
interdict$ or captur$)) and (malware 
or virus or viruses or trojan? or 
worm? or commandeer$ or attack$ 
or cornpromis.f or corrupi.^ or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" 
or buffer$ or stack$ or 
application?)) and dispatch$ and 
handler? and @ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/03/01 14:30 
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S18 


0 


("709"/$.ccls. or "380'7$.ccls. or 
"7137$.ccls. or "726'7$.ccls.) and 
(((window? or "os" or operating) 
adjl hook?)) and (malware or virus 
or viruses or trojan? or worm? or 
comma ndeer$ or attack$ or 
minnroiini^t or mrrunti or 
countermeasur$ or overfllow$ or 
"libc") and (frame$ or buffer$ or 
stack$) and (("ret" or return) adj2 
(instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEI\rr; 
IBI«I_TDB 


OR 


OFF 


2007/03/06 11:18 


S19 


59 


("709"/$.ccls. or "3807$.ccls. or 
"713"/$.ccls. or "7267$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (malware or virus 
or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
romnrnrni<;4 or rorrunt^ or 

countermeasur$ or overfllow$ or 
"libc") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IB|w|_TDB 


OR 


OFF 


2007/03/06 11:21 


S20 


61 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (malware or virus 
or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromise or currupi^ or 
countermeasur$ or overfllow$ or 
"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (instruction? 
or command or function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEI^; 
IB|v|_TDB 


OR 


OFF 


2007/03/06 11:22 


S21 


67 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$xcls.) and 
(((window? or "os" or operating) 
with hook?)) and (security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 

rrirri ini"<t or ^rti inl'^rnnoACi ir<t or 
LOllUpL«p Ul LUUIII.CI IIICCIdUI ^ Ol 

overfllow$ or "libc" or intrusion or 
"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEI^; 
IBMJTDB 


OR 


OFF 


2007/03/06 11:30 
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S22 



S23 



S24 



S25 



68 ("7097$.cds. or "380'7$.ccls. or 
■713"/$.cds. or "726'7$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$ or "libc" or Intrusion or 
"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(exception? or interrupt$ or 
instruction? or command or 
function)) 

68 ("7097$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or wonn? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$ or 
"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (exception? or 
interrupt$ or instruction? or 
command or function)) 

147 (((window? or "os" or operating) 
with hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$ or 
"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (exception? or 
interrupt$ or instruction? or 
command or function)) 

"6412071".pn. 



US-PGPUB; 


OR 


OFF 


USPAT; 






EPO; JPO; 






DERWENT; 






IBM_TDB 






US-PGPUB; 


OR 


OFF 


USPAT; 






EPO; JPO; 






DERWENT; 






IBM_TDB 






US-PGPUB; 


OR 


OFF 


USPAT; 






EPO; JPO; 






DERWENT; 






IBM_TDB 






US-PGPUB; 


OR 


OFF 


USPAT; 






EPO; JPO; 






DERWENT; 






IBM_TDB 













2007/03/06 11:48 



2007/08/01 11:32 



2007/03/06 16:58 
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